Manager, Digital Forensics & Incident Response
When a cyber incident strikes, clients need clarity, speed and confidence. Kroll’s DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Manager, you’ll lead complex, high-profile investigations end to end, acting as the engagement manager clients, counsel and insurers rely on when it matters most.
What You’ll Do
- Lead investigations into ransomware, data breaches, insider threats and business email compromise from initial triage through containment, recovery and final reporting.
- Act as engagement manager: own scope, budget, resourcing and delivery quality, and serve as the primary client contact throughout the matter.
- Direct forensic analysis across endpoints, networks, cloud and enterprise systems, and review the work of the wider investigation team.
- Lead conversations with external legal counsel, insurers and brokers, including briefings, status calls and defensible written reporting.
What We’re Looking For
You are an experienced investigator and engagement leader, commercially astute and calm under pressure, with the judgement to direct a team, manage a client relationship and turn complex evidence into decisions clients can act on.
- 5+ years’ experience in incident response, digital forensics or cyber investigations, including demonstrable ownership of end-to-end engagements.
- Deep technical strength in incident response, forensics, malware analysis or network security, with the credibility to direct and quality-assure others’ work.
- Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure, privileged environments.
- Consulting or professional services background with strong commercial judgement; relevant certifications are advantageous.
Why Kroll
- Work on complex, high-profile incidents with recognised global DFIR experts.
- Own client relationships and engagement outcomes while developing the consultants around you.
- Help organisations respond to and recover from cyber crises.
Ready to solve critical cyber challenges? We’d like to hear from you.
Apply at careers.kroll.com.
#LI-TM1
#LI-Remote
Manager, Incident Response employer: Kroll
Kroll is an exceptional employer for a Quantitative Valuation Analyst, offering a dynamic and inclusive work culture that fosters collaboration and innovation. With access to cutting-edge technology and a commitment to employee growth, you will have the opportunity to develop your expertise in financial modelling while working alongside industry leaders. Located in a vibrant environment, Kroll provides a unique platform for meaningful contributions to complex financial challenges, ensuring that your career can thrive in a supportive and empowering atmosphere.
